Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File:                     7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier:          mprhU9R6K+QKsts/W4tlkNQ2qXjhvETqGuaTR1KQ2sg=
Subject key identifier:   7C:FA:4D:D0:97:7D:FB:E3:AB:79:31:DA:84:F7:FE:73:32:40:C9:E2
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer:       /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial:       019E1C0FB5DE404A25F6CF7AC72F6C2B3A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number:          1903
Signing time:             Tue 12 May 2026 12:00:52 +0000
Manifest this update:     Tue 12 May 2026 12:00:52 +0000
Manifest next update:     Wed 13 May 2026 12:00:52 +0000
Files and hashes:         1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: wOIxCjsXNYzeqP0EBYDJO0sZCkgM7RXq+xJv7lkWpIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:b5:de:40:4a:25:f6:cf:7a:c7:2f:6c:2b:3a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
        Validity
            Not Before: May 12 12:00:52 2026 GMT
            Not After : May 13 12:00:52 2026 GMT
        Subject: CN=7cfa4dd0977dfbe3ab7931da84f7fe733240c9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:a9:fc:5f:63:26:88:80:8a:55:74:88:bb:
                    5e:1c:f2:08:c4:3e:33:a6:72:c8:6d:7b:e9:b6:a1:
                    a5:dd:ec:a0:9f:b2:06:e3:05:c8:a6:eb:a4:d5:42:
                    2a:85:4f:c1:7c:9a:69:65:74:00:5a:f7:eb:f0:51:
                    db:b5:4a:21:8f:07:89:50:b1:7a:30:72:40:ad:6c:
                    bd:8d:19:89:f5:c1:e1:b3:4b:a3:77:4b:ec:d5:51:
                    12:c0:b8:1a:1c:8e:f1:8f:20:fc:8b:36:4b:70:3e:
                    14:38:78:7d:ff:78:4b:50:41:9d:12:41:06:af:64:
                    37:1b:24:ca:cd:a0:32:6b:7e:52:2b:99:c0:9f:84:
                    d9:fa:35:26:77:c4:1a:84:e1:92:ea:e1:c3:39:07:
                    4c:f1:a5:4a:ed:4e:84:63:90:47:dc:64:d7:0e:67:
                    fe:6a:59:3a:76:bd:54:ed:b5:ce:a6:1e:c3:18:a2:
                    97:2a:dd:09:c4:ad:3b:33:f5:f4:5f:64:40:11:72:
                    6a:a1:94:2a:d1:14:66:af:be:7a:93:24:b8:9f:dc:
                    6c:34:77:b6:83:10:6c:81:8f:cd:1a:57:10:21:e5:
                    8e:32:11:4b:91:4d:64:a6:ad:5d:06:00:0d:98:d1:
                    ff:bc:3c:6f:a6:79:b3:7c:07:61:dd:bf:da:8b:29:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FA:4D:D0:97:7D:FB:E3:AB:79:31:DA:84:F7:FE:73:32:40:C9:E2
            X509v3 Authority Key Identifier:
                keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:89:d6:2b:5d:1c:16:3f:59:08:2c:d4:6f:49:8a:29:c1:df:
         4d:3f:63:33:46:fc:3a:51:ba:0e:ca:0e:cd:69:06:20:6b:3d:
         3d:08:55:c8:ad:0b:58:cc:7a:ac:82:e3:b2:a3:5e:c8:dc:39:
         3f:07:a6:9b:5d:b0:89:55:93:d4:0e:4f:6b:fe:ad:d6:9c:b5:
         40:90:cd:28:77:5c:bb:77:a7:a5:a6:17:f2:c8:a5:37:fc:db:
         20:ca:a5:28:d0:6c:fd:32:19:6f:93:12:16:19:1a:8d:fc:e8:
         48:22:6d:dd:26:3b:16:51:53:fa:3f:08:20:9d:db:74:c8:8f:
         53:b4:4b:00:43:75:cf:4d:6c:89:4e:84:a3:4c:39:82:1f:93:
         fa:63:3a:05:32:a9:92:37:f3:d3:a9:47:35:2a:4a:42:2f:31:
         d7:cd:3d:bd:e7:3d:b7:7c:ed:28:bc:3b:6a:ac:fd:65:a1:d9:
         ad:0d:0b:d6:9a:84:6d:65:76:39:91:1d:8e:e2:ad:25:77:f0:
         54:79:25:9d:c4:e8:a4:38:9c:05:d0:48:05:41:86:d7:4b:23:
         5e:29:ef:46:57:4c:e7:6c:a7:1f:d0:a2:4e:58:88:68:ce:6f:
         9f:23:78:b2:6b:3a:94:d9:9e:c3:a1:1c:cd:18:b7:52:9c:b3:
         45:03:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----